LPE & OSI vulnerabilities in Siemens Simatic WinCC

Описание

Multiple serious vulnerabilities have been found in Siemens Simatic WinCC. Malicious users can exploit these vulnerabilities to gain privileges or obtain sensitive information. Below is a complete list of vulnerabilities

1. An unsafe encryption key can be exploited remotely via key extraction;
2. Weak system-object access control can be exploited locally;
3. Vectors related to the WebNavigator server and other unspecified vectors can be exploited via specially designed requests.

Первичный источник обнаружения

• Siemens bulletin
  

Связанные продукты

• WinCC-flexible

Список CVE

• CVE-2014-4685
  warning
• CVE-2014-4682
  critical
• CVE-2014-4683
  warning
• CVE-2014-4684
  high
• CVE-2014-4686
  high

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com